| opendevreview | Sahid Orentino Ferdjaoui proposed openstack/keystonemiddleware master: cache: change log level for handled token corruption https://review.opendev.org/c/openstack/keystonemiddleware/+/895652 | 09:35 |
|---|---|---|
| *** ministry is now known as __ministry | 09:46 | |
| opendevreview | Jake Yip proposed openstack/keystone master: Fix inconsistency in CADF initiator name field https://review.opendev.org/c/openstack/keystone/+/916880 | 10:33 |
| d34dh0r53 | #startmeeting keystone | 15:03 |
| opendevmeet | Meeting started Wed Jun 12 15:03:40 2024 UTC and is due to finish in 60 minutes. The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:03 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:03 |
| opendevmeet | The meeting name has been set to 'keystone' | 15:03 |
| d34dh0r53 | o/ | 15:03 |
| xek | o/ | 15:03 |
| gtema | o/ | 15:03 |
| dmendiza[m] | 🙋♂️ | 15:03 |
| d34dh0r53 | #topic roll call | 15:03 |
| d34dh0r53 | admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], mharley, jph, gtema | 15:04 |
| bbobrov | o/ | 15:04 |
| d34dh0r53 | #topic review past meeting work items | 15:04 |
| d34dh0r53 | #link https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-06-05-15.08.html | 15:05 |
| d34dh0r53 | no action items from the last meeting | 15:05 |
| d34dh0r53 | #topic liaison updates | 15:05 |
| d34dh0r53 | nothing from me | 15:05 |
| d34dh0r53 | #topic specification OAuth 2.0 (hiromu) | 15:06 |
| d34dh0r53 | #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext | 15:06 |
| d34dh0r53 | #link https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability | 15:06 |
| d34dh0r53 | External OAuth 2.0 Specification | 15:06 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-specs/+/861554 (merged) | 15:07 |
| d34dh0r53 | OAuth 2.0 Implementation | 15:07 |
| d34dh0r53 | #link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls | 15:08 |
| d34dh0r53 | OAuth 2.0 Documentation | 15:08 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone/+/838108 (merged) | 15:08 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystoneauth/+/838104 (merged) | 15:08 |
| d34dh0r53 | I think just a few more need rebasing and then reviews, we'll get what's left merged and then close out this topic | 15:08 |
| d34dh0r53 | next up | 15:08 |
| d34dh0r53 | #topic specification Secure RBAC (dmendiza[m]) | 15:09 |
| d34dh0r53 | #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_ | 15:09 |
| d34dh0r53 | 2024.1 Release Timeline | 15:09 |
| d34dh0r53 | Update oslo.policy in keystone to enforce_new_defaults=True | 15:09 |
| d34dh0r53 | Update oslo.policy in keystone to enforce_scope=True | 15:09 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone/+/902730 (Merged) | 15:09 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/903713 (Merged) | 15:09 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/tempest/+/912489 | 15:09 |
| dmendiza[m] | I don't really have any updates since last week | 15:10 |
| d34dh0r53 | Thanks dmendiza | 15:10 |
| d34dh0r53 | next up | 15:10 |
| d34dh0r53 | #topic Improve federated users management (gtema) | 15:10 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone/+/920892 | 15:10 |
| d34dh0r53 | ready for review | 15:10 |
| gtema | right, implemented, tests are passing | 15:11 |
| d34dh0r53 | I need to review, thanks for this gtema (Artem Goncharov) ! | 15:11 |
| gtema | welcome. Tell me if I need to do something to speed this up. We really depend on that | 15:11 |
| d34dh0r53 | will do, Grzegorz Grasza, dmendiza please review | 15:12 |
| d34dh0r53 | next up | 15:12 |
| d34dh0r53 | #topic OpenAPI support (gtema) | 15:12 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-specs/+/910584 | 15:13 |
| d34dh0r53 | gtema: waiting for reviews | 15:13 |
| gtema | in the light of previous topic I was poking with domain configurations and found another issue in docs | 15:13 |
| gtema | so overall we need to get rid of human written api-refs ASAP and do everything through the code | 15:14 |
| gtema | this is only possible when OpenAPI is being implemented ;-) | 15:14 |
| d34dh0r53 | 100% agree | 15:14 |
| d34dh0r53 | #topic open discussion | 15:16 |
| d34dh0r53 | passlib update | 15:16 |
| d34dh0r53 | I've proposed a patch to requirements | 15:16 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/requirements/+/921873 | 15:17 |
| d34dh0r53 | please review | 15:17 |
| d34dh0r53 | there was also a bug filed against this issue | 15:17 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystone/+bug/2068879 | 15:17 |
| d34dh0r53 | next up | 15:17 |
| d34dh0r53 | domain manager (mhen) | 15:18 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-specs/+/903172 | 15:18 |
| d34dh0r53 | I think this just needs reviews | 15:18 |
| gtema | yes, just final reviews | 15:18 |
| d34dh0r53 | next up | 15:19 |
| d34dh0r53 | domain list scoping fix (mhen) | 15:19 |
| d34dh0r53 | the main fix was merged a while ago: https://review.opendev.org/c/openstack/keystone/+/900028 | 15:19 |
| d34dh0r53 | Q: is https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/900545 still applicable? | 15:19 |
| d34dh0r53 | I think we should merge this | 15:19 |
| d34dh0r53 | it would have been a necessary adjustment to the tempest tests after the above merge but tests have been restructured in the meantime (mentioned at PTG) | 15:19 |
| d34dh0r53 | anything else for open discussion before we move on? | 15:20 |
| gtema | not from me | 15:21 |
| d34dh0r53 | cool, moving on | 15:21 |
| d34dh0r53 | #topic bug review | 15:22 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0 | 15:22 |
| d34dh0r53 | I already linked the only new bug in keystone regarding the bcrypt/passlib problem | 15:22 |
| d34dh0r53 | I've submitted the patch to requirements and will update this bug | 15:22 |
| d34dh0r53 | next up | 15:22 |
| d34dh0r53 | #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0 | 15:22 |
| d34dh0r53 | no new bugs in python-keystoneclient | 15:23 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0 | 15:23 |
| d34dh0r53 | keystoneauth is good | 15:23 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0 | 15:23 |
| d34dh0r53 | keystonemiddleware is also good | 15:24 |
| d34dh0r53 | #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0 | 15:24 |
| d34dh0r53 | pycadf is clean | 15:24 |
| d34dh0r53 | #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0 | 15:24 |
| d34dh0r53 | as is ldappool | 15:24 |
| d34dh0r53 | #topic conclusion | 15:24 |
| d34dh0r53 | no meeting next week due to the US holiday | 15:25 |
| d34dh0r53 | Juneteenth | 15:25 |
| d34dh0r53 | that's all I've got, anything else? | 15:25 |
| gtema | Juneteenth? ah you Americans ;-) | 15:25 |
| d34dh0r53 | :) we love our summer holidays | 15:27 |
| d34dh0r53 | thanks everyone! | 15:27 |
| d34dh0r53 | #endmeeting | 15:27 |
| opendevmeet | Meeting ended Wed Jun 12 15:27:43 2024 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:27 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-06-12-15.03.html | 15:27 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-06-12-15.03.txt | 15:27 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-06-12-15.03.log.html | 15:27 |
| gtema | germany is over with spring holidays | 15:27 |
| gtema | now till October nothing at all | 15:28 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!